Privacy Policy

Last updated: 3 November 2026. These templates require review for your jurisdiction before public launch.

1. Who operates this service

EraseVaro is operated by ZZANDREI MEDIA PERSONALIZARI SRL, Bucharest, Romania, tax identification RO43691805. Contact: contact@erasevaro.com.

2. What we collect

We process the images you upload, masks you draw, your account email and password hash when registered, job status and credit usage, limited technical data for security, and Stripe customer/subscription identifiers when applicable. We do not ask for or store full payment card numbers.

3. Photo processing & retention

Images are temporarily stored on the processing server to generate your result. Input and output image files are scheduled for removal after about 60 minutes following creation/completion; temporary files may persist longer in backups, failures or outages and should be monitored. Job/account metadata is kept separately for usage accounting and abuse prevention. Photos are not used to train an AI model.

4. Purposes and legal bases

We process uploaded images to deliver the service, maintain accounts and subscriptions under the service agreement, protect the platform from abuse on legitimate-interest grounds, and comply with applicable legal obligations. Optional analytics/advertising require an appropriate legal basis and consent where required.

5. Third-party services

Stripe processes payments. If advertising is enabled, Google and advertising partners may use cookies, IP addresses and other identifiers subject to your consent choices and their policies. A Google-certified consent platform must be deployed before personalized ads are enabled in applicable regions.

6. Your rights

Subject to applicable law, you can request access, correction, deletion, restriction or portability of personal data, and object to certain processing. You may also complain to your competent data protection authority. Contact contact@erasevaro.com to submit a request.

7. Security and international transfers

We use access controls, HTTPS and isolated processing infrastructure. No system can promise absolute security. Cross-border services, including Stripe or advertising providers, may involve international transfers under their respective data-processing frameworks.